Central Intelligence Agency 



Washington. D C. 20505 


16 October 2019 

Ms. Emily Crose 
MuckRock News 
DEPT MR 79979 
411A Elighland Avenue 
Somerville, MA 02144 

Reference: F-2019-02417 

Dear Ms. Crose: 

This letter is in furtherance of your 10 September 2019 Freedom of Information Act (FOIA) 
request, received in the Office of the Information and Privacy Coordinator on 10 September 
2019, for information regarding: 

1. Internal documentation related to the OPM Hack (occurring in 2015) which 
released the personal information of thousands of American civil service 
personnel. 

2. Recorded material pursuant to investigative reaction to this security breach. 

Regarding Item 1, we are unable to process your FOIA request in its current form as it is not 
reasonably described in a manner for us to conduct a proper search in our record systems. 

Internal documentation "related to” the OPM hack (occurring in 2015) is too broad. Therefore, 
we recommend that you retine your request in a manner that provides additional clarity about the 
nature ot the records you seek. This will facilitate our ability to conduct effective, efficient 
searches of our holdings. 

For example, we could search lor particular incidents or events that are identifiable by a date or 
at a precise location within a specific date range. We can search if you describe a specific 
activity surrounding the activity within a date range; we can search for finished intelligence 
concerning a topic within a specific date range; we can search for biographic reports on specific 
individuals within a date range. We suggest that you describe exactly what it is you wish to 
obtain in your request on that specific topic. We always recommend that you provide a 
reasonable, narrowed date range, to the extent possible. 

As you may already be aware, records concerning the subject of your request have been 
reviewed previously and released to our website. We recommend that you go to our FOIA 
Electronic Reading Room located at ww-w.cia.foia.gov/librarv/reiKlinamnnr tn obtain additional 





information on the OPM hack, which could also be useful in refining the language of your 
request for Item 1. 


We will hold your request for 45 business days from the date of this letter pending your 
response. If we do not hear from you within the time frame, we will assume that you are not 
interested in modifying this request, close your request for Item 1 as it is not reasonably 
described, and proceed to process your request for Item 2. 

Sincerely, 

Mark Lilly 

Information and Privacy Coordinator 



